1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-05-31 19:49:20 +02:00
2021-03-21 19:16:29 +01:00

79 lines
1.7 KiB
PHP

<?php
/**
*
* This file is part of the phpBB Forum Software package.
*
* @copyright (c) phpBB Limited <https://www.phpbb.com>
* @license GNU General Public License, version 2 (GPL-2.0)
*
* For full copyright and license information, please see
* the docs/CREDITS.txt file.
*
*/
namespace phpbb\storage\controller;
use phpbb\cache\service;
use phpbb\config\config;
use phpbb\db\driver\driver_interface;
use phpbb\storage\storage;
class avatar extends controller
{
/** @var config */
protected $config;
protected $allowed_extensions = ['png', 'gif', 'jpg', 'jpeg'];
public function __construct(service $cache, config $config, driver_interface $db, storage $storage)
{
$this->cache = $cache;
$this->config = $config;
$this->db = $db;
$this->storage = $storage;
}
public function handle($file)
{
$file = $this->decode_avatar_filename($file);
parent::handle($file);
}
protected function is_allowed($file)
{
$ext = substr(strrchr($file, '.'), 1);
// If filename have point and have an allowed extension
return strpos($file, '.') && in_array($ext, $this->allowed_extensions);
}
protected function decode_avatar_filename($file)
{
$avatar_group = false;
if (isset($file[0]) && $file[0] === 'g')
{
$avatar_group = true;
$file = substr($file, 1);
}
$ext = substr(strrchr($file, '.'), 1);
$file = (int) $file;
return $this->config['avatar_salt'] . '_' . ($avatar_group ? 'g' : '') . $file . '.' . $ext;
}
protected function send($file)
{
if (!headers_sent())
{
header("Content-Disposition: inline; filename*=UTF-8''" . rawurlencode($file));
header('Expires: ' . gmdate('D, d M Y H:i:s', time() + 3600*24*365) . ' GMT');
}
parent::send($file);
}
}